ELECTRONIC DOCUMENT MANAGEMENT SYSTEM 



Background of the Invention 

(1) Field of the Invention 
5 [0001]The present invention relates generally to an electronic document 

management system, and more particularly, to an electronic document management 
system including a real-time digital identity/certificate generator for effecting 
electronic signatures specifically adapted for effecting electronic mortgage closings. 

10 (2^ Description of the Prior Art 

I. The Mortgage Industry 
[0002]Most mortgage industry processes are essentially reviewing and 
collecting the appropriate documents necessary to determine whether or not to 
perform the next task in the sequence of originating, selling or servicing a loan. The 

1 5 loan officer or loan processor orders, collects and reviews documents fi-om the credit 
bureau, property appraiser, flood certification company, tax certification company, 
surveyor, title insurance company, closing agent, hazard insurance company, 
borrower, borrower's banking institutions, borrower's employers, real estate agent, 
and others as needed. Some of the documents ordered from the borrower may be 

20 created by the processor or loan officer and sent to the borrower for execution. The 
loan underwriter reviews all of these documents to determine whether the loans meet 
the company's requirements for adequate credit, capital and collateral. The loan 
closer, after reviewing the growing collection of documents, adds more documents to 
the loan file - namely, those documents the borrower is required to execute to obtain 

25 the actual fiinds for the loan. The closing agent reviews the documents with the 

borrowers, guides the borrower through signing them, executes and notarizes them as 
appropriate, and returns them to the mortgage company. There, a post closer reviews 
all of the documents for compliance to industry and investor standards, a necessary 
precondition to selling or insuring the loan. The document review may turn up 

30 documents that were not properly completed, and then the cycle begins again, with 

the closing agent or lender having to return to the borrower and have them execute the 
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document(s) correctly. After the loan documents have passed the quality control and 
compliance audit, they may be copied and sent to an investor for review. The investor 
will review the documents in detail as part of deciding whether or not to purchase the 
loan. If the investor decides to purchase the loan and the mortgage company has also 
decided to sell the servicing rights to the loan (the right to receive and disburse the 
monthly mortgage payment from the borrower), the servicer also performs a quality 
control review check. Additionally, during this time, the mortgage company's post 
closer is tasked with following up on certain documents that were not returned by the 
closing agent with the original closing package. These are usually the documents that 
must be recorded, such as the security instrument. If the investor or servicer decides 
to sell the loan or loan servicing rights after purchasing them, the cycle of forwarding 
documents and loan information to another party for review begins again. When the 
borrower pays off the loan, certain documents must be located and invalidated (such 
as the note and security instrument) and returned to the borrower. Usually additional 
documents must be created when a loan is paid off and recorded; the recorded 
document must eventually end up in the hands of the appropriate parties, which may 
be the borrower or mortgage company. 

[0003]Therefore, the paper trail continues to grow throughout the life cycle of 
the loan; there is an initial spurt of paper generation which then is followed by a 
period of reviewing that paper; followed by another spurt of document generation 
which is followed by another review period; then the documents are carefiiUy 
archived until the last documents are generated, which are those necessary to release 
the lien. During all most of these processes, the documents are generally physically 
transferred from one party to the next, multiplying the originals into several file 
copies exponentially. 

[0004JTO complicate matters, because the American mortgage process can 
involve seven participants or more, with all of the data and documents coming from 
this combination of participants, the data from the documents is inevitably re-keyed 
into different systems, thereby increasing the potential for error. 
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II. The Mortgage Processes 
[0005] The current American processing process consists of ordering the 
required documentation needed to verify the borrower's claims about the borrower as 
well as the property that is being used as collateral for the loan. These documents are 
5 generally ordered from multiple providers, and the loan processor or loan officer must 
track the ordering, receipt, and review of these documents. The method of ordering 
documents varies by the document provider; therefore the loan processor may call the 
closing agent to schedule the closing, fax the appraisal request to the appraiser, order 
the credit report or flood certificate online, and so on. The timing of gathering all of 
10 these documents is critical to maintaining the borrower's interest in obtaining the loan 
from the chosen mortgage company, as well as ensuring the loan closing occurs on 
schedule. 

[0006] Although many service providers are now returning their documents 
electronically, the problem still remains for the lender on how to manage these 

1 5 documents by associating and attaching them to the correct loan file. Some service 
providers are also returning a separate data file with their documents, allowing the 
lender to easily update their system of record (commonly called a Loan Origination 
System) with the information from the document. 

[0007]Even with a moderate or high amount of electronically enabling the 

20 processing steps, the closing process becomes another mountain of paper. Documents 
may be sent to closing agents in paper form or electronically, but the end result is a 
stack of documents for the closing agent and borrower to wade through in the 
traditional half-hour or hour generally allotted for loan closings. 

[0008]The current American mortgage closing process consists of two main 

25 models: traditional closings and witness closings. Traditional closings are used for 

purchases and some refinances. The borrowers (and sellers, if applicable) come to the 
closing agent's office, or a mutually agreed-upon location. The closing agent reviews 
the documents with the parties, explaining the documents. As each document is 
reviewed, the closing agent obtains the wet-ink signatures of the applicable parties on 

30 the document, and notarizes those documents requiring notarization. 
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[0009] The second model of mortgage closing, also known as the witness or 
signature' closing, is gaining momentum with the refinance market. In this model, the 
lender still sends the documents to the closing agent/signing agent; or may even send 
the documents to the borrower directly. If the documents are sent to a closing agent, 
5 the closing agent schedules an appointment with the borrower, generally at the 

borrower's home or office. If the documents are sent to the borrower, the borrower is 
instructed to find a notary public in their area and arrange their own appointment with 
the notary public. The actual signing of the documents takes place with just the 
borrower(s) and the notary, and the notary offers little or no document explanations, 

10 depending on the laws for that state. The signing agent/notary's purpose in this model 
is purely to witness the signing of the documents and notarize them as needed. Afl:er 
the documents have been signed, either the notary returns them to the closing agent 
(who then forwards them to the lender), or the borrower returns them to the lender. 
[0010]In both of these models, the lender has performed a significant 

15 identification check on the borrowers as part of underwriting their loan application. 
The closing agent has performed an identification check on the borrowers and sellers 
as part of fulfilling the conditions of the title binder, which the title insurer requires in 
order to issue the title insurance policy. At the closing itself, the notary (who may 
also be the closing agent/signing agent, or may be an assistant to the closing agent) 

20 verifies the borrowers and sellers' identities by photo identification. 

[0011]In addition, there are liability protections for the parties involved in the 
closing, that offer possible reimbursement for losses suffered if there is negligence in 
conducting the closing. The lender may request that the closing agent provide the 
lender with a specific "Insured Closing Letter " "(ICL)" for each closing. The title 

25 insurance company that is providing the title insurance for the loan issues the ICL. 

The ICL names the title insurance company as liable to the lender if the closing agent 
does not execute the lender's closing instructions as written, or does not disburse the 
loan funds properly. Of course, the closing agent may be a branch of the title 
insurance company, an affiliated business partner, or an independent business partner. 

30 The point is that the title insurance company, as part of agreeing to provide title 

insurance policies for closings that the closing agent performs, has done some level of 
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due diligence on the closing agent company as part of their relationship and as a basis 
of that due diligence is therefore willing to be liable for the closing agent's behavior 
under certain conditions. 

[0012] Additionally, the notary offers a method of recourse for the lender if the 
notary does not perform the proper verification of identity of the borrowers and 
sellers. The notary public is a public office and each state has strict laws regarding 
not only the powers of the notary but also how they must execute their powers ~ 
including consequences for notary negligence. 

in. Earlier Attempts at Electronic Closings 
[0013]Electronic signatures became a legally permissible method of signing 
with the passage of the federal ESIGN (Electronic Signatures in Global and National 
Commerce) Act, which became effective October 1, 2000 (15 U.S.C. § 7001 etseq.) 
Previous to the federal law, a model state law (Uniform Electronic Transactions Act, 
or "UETA") had been promulgated by the National Conference of Commissioners on 
Uniform State Laws in July 1999. This model state law has now been adopted in 
some form by a majority of the states. 

[0014]"Electronic signatures" is a blanket term used to convey the many 
different types of signature by electronic means. Some examples of electronic 
signature are: 

[0015] 1) A "click" signature wherein a user clicks a "sign" button 
[0016] 2) A "PIN" signature wherein the signer enters a Personal 
Identification Number (PIN) and clicks a "sign" button 
[0017] 3) A "digital" signature which is created through cryptographic 
methods of binding information from a digital certificate to the document 
being signed 

[0018] 4) A "biometric" signature, which uses biological information about 
the signer (retina scan, fingerprint) as part of the signature 

[0019]Electronic signatures have been used in pilot programs for mortgage 
loan processes (see a synopsis of industry efforts in "Closing In on a Paperless 
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Mortgage" by Patrick Barta, the Wall Street Journal, June 16 2003). Electronic 
signatures may be used for signing upfront disclosures as well as the mortgage loan 
closing documents (see "Quicken Rolls Out Silanis e-Signatures for Consumer 
Mortgage Loans" by Scott Kersnar, National Mortgage News, October 14, 2002). 
5 Some of the electronic signatures considered in these pilots have been digital 
signatures as well as click or PIN signatures. 

[0020] An example of a current electronic closing process requires borrowers, 
sellers, and signing agents (notaries public) to go to a certificate authority - a 
company that issues digital certificates - to apply for and retrieve a digital certificate. 

10 An electronic closing software system typically contains a link to a certificate 

authority's website where the person desiring a digital certificate must enter some 
personal information. The person must also specify a password that the certificate 
authority will use to authenticate the person when he or she retrieves the certificate. 
Each party must purchase a digital certificate using a credit card number or payment 

15 voucher. The process of applying for and receiving a certificate generally takes at 
least 1-2 weeks, because the certificate authority performs an identity check on the 
person. This is also called "identification and authentication" or "I & A." It is usually 
done by verifying information that the person has provided against a private 
information database such as a credit reporting bureau or address bureau. After the 

20 certificate has been issued, the certificate authority sends a notice to the person, 
usually through regular post office mail, that the certificate is ready for electronic 
"pickup." The person must log into the certificate authority's website, enter her 
password, retrieve the digital certificate, and then save it to the certificate store on her 
Internet browser. Finally, the person must then save (export) the digital certificate to 

25 some form of electronic media and bring it with them to the closing appointment. 

[0021] At the closing, which generally may only occur in a browser or offline 
session opened by the signing agent, the signing agent must import the borrowers and 
sellers' digital certificates from the electronic media into the certificate store 
contained in the internet browser on her computer. After the certificates have been 

30 put into the signing agent's certificate store, the signing agent must then associate 

(register) each of the certificates to a correct user identification number. This step is a 
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security measure to assure that the user is not attempting to sign with someone else's 
digital certificate, during the signing process. After the certificates have been 
manually registered to their users' respective user identification number, the signing 
agent goes to a screen that displays all of the documents to be signed electronically. 
The signing agent can determine the order in which the documents display. The 
parties view each document one by one, executing each document before they can go 
on to the next one. However, during the act of signing a document, the user must still 
select her digital certificate from the certificate store of the signing agent's computer 
to apply it to the document. To do so, the user displays all of the certificates loaded 
onto the signing agent's computer, highlights their certificate in the list, and clicks a 
button labeled "Sign." After all of the documents have been signed, the signing agent 
must manually delete the certificates from the certificate store on their computer. 

IV. Problems with the earlier Electronic Closing Process 
[0022]The problems with the current process can be generally divided into 
usability, security and financial items, as listed below. 

[0023] Certificate Issuance Process 

• I0024]Financial 

o [0025]Because the standard validity period of digital certificates is for 

one year, the cost is greater, 
o [0026] Having the certificate authority perform the "identity 

verification" of the borrowers and sellers greatly increases the price of 

the certificates for these users, 
o [0027]The actual process of paying for the certificates is costly to 

administer. 

• (0028]Usability 

o [0029] Digital certificates are a new technology to most people; and 
therefore many people are cautious to antagonistic about the use of 
them. 
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o [0030]Users must go to a certificate authority to obtain their certificate, 
o [0031] The certificate authority websites may be generic, meaning 

users may have to print out instructions on how to apply for the 

certificate, and then follow them carefully, 
o [0032]The certificate application asks questions about private 

information that is necessary to validate the person's identity but the 

user could view the questions as invasive or excessive, 
o [0033]The certificate application process, from time of application 

until the certificate is issued, takes too long in light of the industry 

push to originate and close loans on the same day. 
o [0034] From the perspective of the closing agent and lender, it is 

difficult for them to manage and ensure that the borrowers and sellers 

have performed the certificate application process in a timely manner 

prior to the closing date, 
o [0035] If the borrowers or sellers do not apply for their certificates in 

time, forget to bring their certificate with them to closing, etc., the 

closing must be rescheduled. 

• [0036] Security 

o [0037] The lender cannot control what name the borrowers (and sellers) 
use for their digital certificate. This allows "document undersigning" 
whereby the borrower may apply for their certificate in the name of 
Kim Doe when the printed name on their loan documents is shown as 
Kimberly M. Doe. The borrower must sign the documents either as 
their name is typed on the document, or "over sign" the document. 

o [0038] Many people are not comfortable with obtaining and using a 
digital certificate, especially when it is largely a "do-it-yourself 
process. 

o [0039]No one is verifying in the process that the certificate Jane 
Borrower brings to closing is really Jane Borrower's certificate. 
[0040] Signing Process 

• [0041]Usability 
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o [0042]Making the signing agent user manually register each certificate 

to the appropriate user creates an opportunity for error, 
o [0043]Requiring the user to select her certificate firom a dropdown list 

creates an opportunity for error, 
o [0044] If the borrower or seller has not logged into the system with her 
own user ID/password prior to closing, she will not have 
acknowledged an explanation of mandated consumer protections. 
[0045] Security 

o [0046]The effect of viewing all of the certificates loaded on the 
computer being used for the closing could be disconcerting for 
borrowers and sellers, 
o [0047] The signing agent user, who is responsible for conducting the 
electronic closing, must manually remove all of the borrower and seller 
certificates fi-om the computer used to conduct the closing, 
o [0048] Each certificate currently obtained is valid for one year, which 
potentially increases the opportunity for fraud if the certificate is not 
removed from the computer. 

V. Electronic Document Storage 
20 [0049] Many lenders have begun imaging the loan documents in an effort to 

reduce the stacks of manila file folders. This is sometimes done through the loan 
process, but generally most lenders who image documents do so at the end of the loan 
origination process, after the loan has closed- However, most electronic document 
storage systems are basically archive systems and generally do not have any of the 
25 secondary market processes included in their workflow. 

[OOSOJThus, there remains a need for a new and improved electronic document 
management system including a real-time digital certificate generator for effecting 
electronic signatures that overcomes many of the problems with the prior art 
electronic closing process while, at the same time, provides a document repository 
30 module including means for storing documents and means for accessing documents. 
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Summary of the Invention 
[0051]The present invention is directed to an electronic document 
management system. The system includes a document entry module; a document 
management module; and a real time digital certificate generator for effecting 
5 electronic signatures. In the preferred embodiment, the real time digital certificate 
generator includes: (i) means for entering data for certificate recipient including an 
entrusted identification and authentication (I&A); (ii) means for generating a key pair; 
(iii) means for transmitting data to a certificate authority; and (iv) means for receiving 
the digital certificate fi*om the certificate of authority. Also, in the preferred 
10 embodiment, the system further includes a document repository module for storing 
documents and for accessing documents. 

[0052] In the preferred embodiment, the document entry module includes 
means for uploading documents and means for naming each document. The means 
for uploading documents includes means for specifying documents to be uploaded. 
15 Also, the means for uploading documents includes means for uploading documents 
singly. The means for uploading documents includes means for uploading document 
packages. 

[0053]The means for uploading documents includes means for uploading 
documents via a business-to-business (B2B) integration with document source. The 
20 means for uploading documents may include means for uploading documents through 
a web browser. 

[0054] The means for uploading documents may include means for specifying 
the structure of the document package. The means for selecting the structure of the 
document package includes means for defining the structure of the document package. 

25 [0055] In the preferred embodiment, the means for specifying the structure of 

the document package includes means for cataloguing and storing structures of 
document packages. The means for cataloguing and storing structures of document 
packages may include means for describing a business purpose of a document. The 
means for cataloguing and storing structures of document packages includes means 

30 for pa^rsing the contents of document packages into individual documents. 
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[0056] In the preferred embodiment, the documents are imported 
electronically. However, the documents may be scanned into an electronic format 
prior to being imported. In the preferred embodiment, the document format is 
selected from the group consisting of PDF, XHTML, PCL, JPEG, GIF, TIFF, PS and 
5 XML and combinations thereof The documents may also be generated externally. 

[0057] The means for naming each document may further include means for 
associating related entries of documents. Also, the means for associating related 
entries of documents may includes means for associating related entries of documents 
in a hierarchal manner. The means for naming may further include means for naming 
10 each document. 

[0058] In the preferred embodiment, the document entry module further 
includes means for setting privileges. The document management module may 
include means for displaying documents and means for attaching an electronic 
signature to a document. In the preferred embodiment, the means for attaching an 
1 5 electronic signature to a document includes means for attaching a system-generated 
tamper seal. 

[0059] In the preferred embodiment, the means for attaching an electronic 
signature to a document includes means for permitting system users to attach a click 
signature to a document. The means for attaching an electronic signature to a 
20 document may include means for permitting system users to attach a biometric 
signature to a document. 

[0060] The means for displaying may include a browser. In the preferred 
embodiment, the browser is an Internet browser. However, the means for displaying 
may be a Personal Digital Assistant (PDA) or a kiosk, wherein the kiosk is located at 
25 the closing agent. 

[0061] In the preferred embodiment, the means for attaching electronic 
signature is a digital certificate to effect a digital signature. The means for attaching 
electronic signature may be a pin signature to effect signature. 

[0062]The document management module may further include an order 
30 module. The order module may include a list of available service providers and 
means of selecting one or more services from the service providers. In one 
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embodiment, the list of available service providers is a product catalog. The order 
module may further include filtering means. In the preferred embodiment, the 
filtering means is a preferences filter. The filtering means may also be a locations 
filter. The order module may further include means for associating one or more 
5 documents with a selected entry. 

[0063] In the preferred embodiment, the document management module 
further includes means for printing documents. The document management module 
may further include means for downloading electronic copies of documents. The 
document management module may further include means for deleting selected 

10 documents. Also, the document management module may further include means for 
displaying document histories. The document management module may further 
including means for changing document privileges. 

[0064] In the preferred embodiment, the real time certificate generator further 
including means for automatically associating the digital certificate with the 

15 certificate recipient system user ID. The real time certificate generator may further 
including means for automatically removing the certificate. The means for 
automatically removing the certificate may removes the certificate firom means for 
data entry. 

[0065] The real time certificate generator may further include means for 
20 providing secondary verification. In the preferred embodiment, the means for 
providing secondary verification is a system user ID. 

[0066] In the preferred embodiment, the means for initiating the generation of 
a key pair for the digital certificate may further include means for generating the 
initiation of a key pair for a browser-based digital certificate. Also, the means for 
25 initiating the generation of a key pair for the digital certificate may further include 

means for generating the initiation of a key pair for a roaming digital certificate. The 
means for initiating the generation of a key pair for the digital certificate may further 
include means for generating the initiation of a key pair for a hardware-based digital 
certificate. 

30 [0067]In the preferred embodiment, the means for receiving the digital 

certificate firom the certificate authority further includes means for automatically 
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installing the certificate on a computer's browser. The real time certificate generator 
may further include means for managing the life cycle of the certificate from within 
the document management system. The means for managing the life cycle of the 
certificate from within the document management system may include means for 
5 performing processes necessary to renew the digital certificate. In the preferred 

embodiment, the means for managing the life cycle of the certificate from within the 
document management system includes means for revoking the digital certificate. 
Also, the means for managing the life cycle of the certificate from within the 
document management system may include means for performing processes 

10 necessary for certificate recipient customer support. 

[0068] In the preferred embodiment, the means for accessing documents 
includes means for sorting documents. Also, the means for accessing documents may 
include means for versioning documents. 

[0069] The means for accessing documents may include means for performing 

15 validations on documents. In addition, it may further include means for filtering 
documents by user-defined criteria. The means for filtering documents by user 
defined criteria includes means for defining filters. The means for filtering 
documents may include pre-selected criteria. The pre-selected criteria may include 
grouped documents. Also, the means for filtering documents by user defined criteria 

20 may further include means for grouping filtered documents. 

[0070] In the preferred embodiment, the document repository module further 
includes a transactions module. The transaction module may further include means 
for batch transferring documents. 

[0071]Accordingly, one aspect of the present invention is to provide an 

25 electronic document management system, the system comprising: a document entry 
module; a document management module; and a real time digital certificate generator 
for effecting electronic signatures. 

[0072] Another aspect of the present invention is to provide a real time digital 
certificate generator for effecting electronic signatures for an electronic document 

30 management system, the apparatus comprising: means for entering data for certificate 
recipient including an entrusted identification and authentication (I&A); means for 
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initiating the generation of a key pair for the digital certificate; means for transmitting 
data to a certificate authority; and means for receiving the digital certificate from the 
certificate authority. 

[0073] Still another aspect of the present invention is to provide an electronic 
document management system, the system comprising: a document entry module; a 
document management module; a real time digital certificate generator for effecting 
electronic signatures, the real time digital certificate generator including: (i) means for 
entering data for certificate recipient including an entrusted identification and 
authentication (I&A); (ii) means for generating a key pair; (iii) means for transmitting 
data to a certificate authority; and (iv) means for receiving the digital certificate fi-om 
the certificate of authority; and a document repository module for storing documents 
and for accessing documents. 

[0074] These and other aspects of the present invention will become apparent 
to those skilled in the art after a reading of the following description of the preferred 
embodiment when considered with the drawings. 
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Brief Description of the Drawings 
[0075] Figure 1 is a schematic diagram illustrating an electronic document 
management system constructed according to the present invention; 
5 [0076] Figure 2 is a schematic diagram of a document repository module 

including means for storing documents and means for accessing documents; 

[0077] Figure 3 is a schematic diagram of a document entry module for an 
electronic document management system; 

[0078] Figure 4 is a schematic diagram of a document management module for 
10 an electronic document management system; 

[0079] Figure 5 is a schematic diagram of a real-time digital certificate 
generator for effecting electronic signature for an electronic document management 
system; 

[0080] Figure 6 is a screen shot showing a user interface for the document 
15 entry module for an electronic document management system constructed according 
to the present invention; 

[0081]Figure 7 is a screen shot showing a user interface for a means for 
specifying the structure of a document package for an electronic document 
management system constructed according to the present invention; 
20 [0082]Figure 8 is a screen shot showing a user interface for a means for 

cataloguing and storing structures of document packages and a means for parsing the 
contents of document packages into individual documents for an electronic document 
management system constructed according to the present invention; / 

[0083]Figure 9 is a screen shot showing a user interface for a document 
25 management module for an electronic document management system constructed 
according to the present invention; 

[0084]Figure 10 is a screen shot showing a user interface for a real-time 
certificate generator for an electronic document management system constructed 
according to the present invention; 
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[0085]Figure 1 1 is a screen shot showing a user interface for performing 
digital certificate processes for an electronic document management system 
constructed according to the present invention; 

[0086]Figure 12 is a screen shot showing a user interface for a means for 
5 managing the life cycle of certificates for an electronic document management system 
constructed according to the present invention; 

[0087]Figure 13 is a screen shot showing a user interface for a means for 
receiving digital certificates fi-om a certificate authority for an electronic document 
management system constructed according to the present invention; 
10 [0088] Figure 14 is a screen shot showing a user interface for a means for 

removing a digital certificate for an electronic document management system 
constructed according to the present invention; 

[0089] Figure 15 is a screen shot showing a user interface for a means for 
attaching an electronic signature to a document for an electronic document 
1 5 management system constructed according to the present invention; 

[0090]Figure 16 is a screen shot showing a user interface for a means for 
attaching a digital signature to a document for an electronic document for a document 
management system constructed according to the present invention; 

[0091]Figure 17 is a screen shot showing a user interface for a document 
20 repository module for an electronic document management system constructed 
according to the present invention; 

[0092]Figure 18 is a screen shot showing a user interface for a means for 
accessing documents for an electronic document management system constructed 
according to the present invention; 
25 [0093]Figure 19 is a screen shot showing a user interface for a means for 

accessing documents for an electronic document management system constructed 
according to the present invention; 

[0094] Figure 20 is a screen shot showing a user interface for an order module 
for an electronic document management system constructed according to the present 
30 invention; 
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[0095]Figure 21 is a screen shot showing a user interface for an order module 
for an electronic document management system constructed according to the present 
invention; 

[0096] Figure 22 is a screen shot showing a user interface for a filtering means 
5 for an electronic document management system constructed according to the present 
invention; 

[0097] Figure 23 is a screen shot showing a user interface for a preferences 
filter for an electronic document management system constructed according to the 
present invention; 

10 [0098]Figure 24 is a screen shot showing a user interface for a means for 

accessing documents for an electronic document management system constructed 
according to the present invention; 

[0099]Figure 25 is a screen shot showing a user interface for a means for 
filtering documents by user-defined criteria for an electronic document management 
1 5 system constructed according to the present invention; 

[OlOOjFigure 26 is a screen shot showing a user interface for a means for 
grouping documents by user-defined criteria for an electronic document management 
system constructed according to the present invention; 

[0101]Figure 27 is a screen shot showing a user interface for a means for batch 
20 transfer of documents for an electronic document management system constructed 
according to the present invention; 

[0102]Figure 28 is a screen shot showing a user interface for a means for 
setting document privileges for an electronic document management system 
constructed according to the present invention; and 
25 [0103]Figure 29 is a screen shot showing a user interface for a means for 

versioning documents for an electronic document management system constructed 
according to the present invention. 
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Description of the Preferred Embodiments 

[01 04] In the following description, like reference characters designate like or 
corresponding parts throughout the several views. Also in the following description, 
5 it is to be understood that such terms as "forward," "rearward," "left," "right," 

"upwardly," "downwardly," and the like are words of convenience and are not to be 
construed as limiting terms. 

[0105]Referring now to the drawings in general and Figure 1 in particular, it 
will be understood that the illustrations are for the purpose of describing a preferred 

10 embodiment of the invention and are not intended to limit the invention thereto. As 
best seen in Figure 1, a schematic diagram illustrating an electronic document 
management system, generally designated 8, is shown constructed according to the 
present invention. The electronic document management system 8 includes four 
major sub-assemblies: a document entry module 10; a document management module 

15 12; a real time digital certificate generator for effecting electronic signatures 14; and a 
document repository module 16. 

[0106]Figure 2 is a schematic diagram of the document repository module 16 
including means for storing documents 17 and means for accessing documents 18. 
The means for accessing documents 17 includes an HTML user interface to allow 

20 users to retrieve a list of documents associated to a loan and a relational data source 
from which data related to the list of documents is retrieved. 

[0107]The means for accessing documents 18 of the document repository 
module includes means for sorting documents 120. The means for sorting documents 
includes an HTML user interface to sort documents associated to a loan file based on 

25 user-specified criteria and a retrieval algorithm utilizing sort capabilities of the 
underlying relational data source. The means for accessing documents includes 
means for versioning documents 122 including a relational data store structure that 
allows different versions of the same document over time. The means for accessing 
documents includes means for performing validations on documents 124 including 

30 W3C XML signature and other related XML specifications, which verify the validity 
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of digital signatures applied to the document and tamper seal. The components are 
available from iLumin DHS/iCabinet. 

(0108]The document repository module includes means for filtering 
documents by user-defined criteria 20 including an HTML user interface that allows 
5 users to specify filter criteria by using input fields and Java business objects to pass 
the user-specified filter criteria, which in turn is used to retrieve the qualified 
documents from a relational data source. The means for filtering documents by user- 
defined criteria 20 includes means for defining filters 126 including an HTML user 
interface for providing input fields for enabling a user to specify filter criteria. The 

10 means for filtering documents by user-defined criteria 20 includes means for filtering 
documents by pre-selected criteria 22 including means for associating documents 24. 
The means for filtering documents by pre-selected criteria 22 includes an HTML user 
interface incorporating a system-defined pre-selected or default filter criteria. The 
means for associating documents 24 includes an HTML user interface for 

1 5 selecting/retrieving a group of documents identified by user-defined identifier and a 
grouping construct maintained in a relational datastore that provides context to the 
documents being uploaded including associating the documents with an order and 
associating orders with loan files. The means for filtering documents by user-defined 
criteria 20 also includes means for grouping filtered documents 26. 

20 [01 09] The document repository module 16 also includes a transactions 

module 30. The transactions module 30 includes an HTML user interface for 
allowing users to perform system-defined business flows on one or many loans and 
their related documents. The performed actions are stored into relational data source. 
The supporting business logic resides in Java objects. The transactions module 

25 further includes a means for batch transfer of documents 32. The means for batch 
transfer of documents 32 includes an HTML user interface for enabling users to 
transfer ownership of loans and their related documents. The performed actions are 
stored in a relational data source. The business logic resides in Java objects. 

[0110]Figure 3 is a schematic diagram of the document entry module 10 for 

30 the electronic document management system 8. The document entry module 10 

includes means for uploading documents 34 and means for naming each document 
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35. The means for uploading documents 34 includes an HTML control for enabling 
a user to post a selected file as a multi-part form to a server via HTTPS. The means 
for naming each document 35 includes reference data contained in a database that 
allows a user or system administrator to characterize the general business purposes of 
5 the document. 

[0111]The means for uploading documents 34 includes means for specifying 
documents to be uploaded 130, means for uploading documents singly 132, and 
means for uploading document packages 134. The means for specifying documents 
to be uploaded 130 includes an HTML control for providing input fields for file 

10 selection and file description. The means for uploading documents singly 132 

includes an HTML control that enables users to post a selected file as a multi-part 
form to a server via HTTPS, wherein the selected file is restricted to a GIF, TIF, 
JPG, XML, PDF, PS, or PCL format and is understood by the user to comprise a 
single document. The means for uploading document packages 134 includes a 

1 5 mechanism that enables a user to deliver document content wherein the content is 
understood to be a package containing multiple documents. 

[0112]The means for uploading documents 34 includes a means for uploading 
documents via a business-to-business (B2B) integration with document source 136. 
The means for uploading documents via a business-to-business (B2B) integration 

20 with document source 136 includes an XML-based system-to-system interface for 
enabling the delivery of a payload that is understood to be a package comprised of 
multiple documents. Encoding, i.e. Base 64, is used for binary payloads. 

[0113]The means for uploading documents 34 includes a means for uploading 
documents through a web browser 140. The means for uploading documents through 

25 a web browser 140 includes an HTML control that enables users to post a selected 

file as a multi-part form to a server via HTTPS, wherein the selected file is restricted 
to a ZIP, JAR, or other archive format, and is understood by the user to comprise 
multiple documents. 

[0114]The means for uploading documents 34 includes a means for specifying 

30 the structure of the document package 142. The means for specifying the structure of 
the document package 142 includes an HTML user control for specifying the general 
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classification of the package. This value is one of a defined set of reference data 
values from the means for defining and specifying the structure of the document 
package 210. 

[01 15] The means for selecting the structure of the document package 142 
5 includes means for cataloguing and storing structures of document packages 144. 

The means for cataloguing and storing structures of document packages 144 includes 
an HTML user interface for collecting reference data describing associations 
between document identifiers available within the package to the intended business 
purpose of that document as expressed by reference data from the means for 
10 describing a business purpose of a document 220. Other options for the user 
interface could be utilized including Java Swing and Java Applet. 

[0116]The means for selecting the structure of the document package 142 
includes means for defining and specifying the structure of the document package 
210. The means for defining and specifying the structure of the document package 
15 210 includes an HTML user interface for collecting reference data describing a 

general classification of packages and distinguishing characteristics of such packages 
and Java classes for managing persistence into relational datastore. 

[0117]The means for cataloguing and storing structures of document packages 
144 includes means for describing a business purpose of a document 220. The 
20 means for describing a business purpose of a document 220 includes an HTML user 
interface for collecting reference data describing the business purpose of a document 
and Java classes for managing persistence into relational datastore. 

[01 19] The means for cataloguing and storing structures of document packages 
144 includes means for parsing the contents of document packages into individual 
25 documents 146. The means for parsing the contents of document packages into 

individual documents 146 includes a processing algorithm implemented in Java that 
utilizes the package characteristics from the 210 and reference data firom 220 to 
separate a package into the documents it contains. 

[0120]The documents are imported electronically. The documents may be 
30 scanned. The document may be in formats including portable document format 
(.PDF), printer control language (.PCL), extensible hypertext markup language 
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(.XHTML), joint photographic exports group (.JPEG), graphic interchange format 
(.GIF), tagged image file format (.TIFF), Post Script (PS) or extensible markup 
language (XML). 

[0121]The means for uploading documents 34 of the document entry module 
5 also includes means for uploading documents that are externally generated. The 
means for naming each document 35 of the document entry module includes means 
for associating related entries of documents 36. The means for associating related 
entries of documents 36 includes a relational data store structure that allows different 
versions of the same document over time. The means for associating related entries 

10 of documents 36 includes means for indexing documents 150. The means for 

associating related entries of documents 36 includes means for associating related 
entries of documents in a hierarchical manner 40. The means for associating related 
entries of documents in a hierarchal manner 40 includes relational data store 
maintaining a grouping construct for providing context to the document being 

15 uploaded. This includes associating the document with an order, and associating 

orders with loan files. The means for naming each document 35 includes means for 
setting privileges 44. The means for setting privileges 44 includes reference data 
contained in a database that allows system or system administration to specifically 
relate role-based access control to the documents. 

20 [0122]Figure 4 is a schematic diagram of a document management module 12 

for an electronic document management system. The document management module 
includes means for displaying documents 46 and means for attaching an electronic 
signature to a document 50. The means for displaying documents 46 includes a 
document identifier for retrieving content from a relational data source. The 

25 document is formatted for an appropriate display device. The relational data source is 
iLumin DHS/iCabinet and General American Corporation's (GAC) EPN. The means 
for attaching an electronic signature to a document 50 includes a third-party tool - 
iLumin- that provides an application program interface (API) for associating a digital 
signature with a document based on a certificate. 

30 [0123]The means for attaching an electronic signature to a document 50 

includes means for attaching a system-generated tamper seal 152. The means for 
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attaching a system-generated tamper seal 152 includes a Java business API for 
generating digital signatures for the complete content of related documents based on a 
system-wide certificate. 

[01241The means for attaching an electronic signature to a document 50 
5 includes means for permitting system users to attach a click signature to a document 
1 56. The means for permitting system users to attach a click signature to a document 
156 includes an HTML interface containing an applet that enables a user to use an 
HTML control for click input. 

[0125]The means for attaching an electronic signature 50 to a document 
10 includes means for permitting system users to attach a biometric signature to a 

document 156. The means for permitting system users to attach a biometric signature 
to a document 156 includes commercial-specific HTML plug-ins for capturing 
biometric data and a Java business API for identifying and validating for generating 
digital signatures. 

15 [0126]The means for displaying documents 46 may include an Intemet 

browser 52, a personal digital assistant (PDA) 54, and/or a kiosk 56. For displaying 
documents through an Intemet browser, the means for displaying documents 46 may 
rely on features inherent in personal computer browser software or plug-ins available 
for the personal computer browser, A servlet provided by iLumin may also be 

20 utilized. For displaying through a PDA, the means for displaying documents 46 may 
rely on features inherent in a PDA browser or plug-ins available for the PDA browser. 
For displaying documents through a kiosk, the means for displaying documents 46 
relies on features inherent in the corresponding browser or plug-ins available for the 
corresponding browser. The kiosk 56 may be located at a closing agent. 

25 [0127]The means for attaching an electronic signature 50 is a digital certificate 

to effect a digital signature 60 or a personal identification number (PIN) signature to 
effect a signature 62. Where the means for attaching an electronic signature 50 is a 
digital certificate to effect a digital signature 60, the means may include an HTML 
containing an applet that displays certificates to generate digital signatures upon 

30 activation of an HTML control. Where the means for attaching an electronic 

signature 50 is a personal identification number signature to effect a signature 62, the 
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means may include an HTML containing an applet that allows user or PIN input and a 
Java business API that validates the PIN and generates the signature using a system- 
wide certificate. 

[0128]The document management module 12 includes an order module 64. 
5 The order module 64 includes an HTML user interface, business logic, and storage 
mechanism that comprise an order management subsystem. A third-party set of 
components — available from General American Corporation's EPN — may be used for 
some of the business logic and storage mechanisms, combined with a customer 
HTML interface and custom business logic. 

10 [01 29] The order module includes a list of available service providers 66 and 

means for selecting one or more services fi-om the service providers 67. The list of 
available service providers 66 includes an HTML user interface that enables a user to 
select a corporate entity that can provide a selected service. The means for selecting 
one or more services fi'om the service providers 67 includes an HTML user interface 

15 supporting a workflow whereby a user can select multiple services in a sequential 
maimer. 

[0130]The list of available service providers 66 is a product catalogue 70. The 
product catalogue includes an HTML user interface, business logic, and storage 
mechanism, with reference data entity that provides general characterization of 

20 products and a mechanism to relate products to corporate entities that allows a system 
administrator to associate its company/entity with the products and services it offers. 
The product catalogue also includes on the back end a third-party set of components 
provided by General American Corporation's EPN for business logic and storage 
mechanisms, interface and custom business logic. 

25 [0131]The order module also includes means for filtering the list of available 

service providers 72, which is a preferences filter 74. The list of available service 
providers 72 includes an HTML user interface for providing the capability to restrict 
or expand the list of available service providers and a retrieval algorithm to construct 
the list based on supplied criteria. General American Corporation's EPN provides the 

30 data and algorithm. The means for filtering the list of available service providers 66 
also includes a location filter 76. The location filter 76 includes an HTML user 
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interface for enabling service providers to specify products they can offer in a 
geographical location and a processing algorithm that utilizes the product catalogue 
reference data to present or allow a user to select appropriate corporate entities that 
satisfy conditions specific to a specific context or user-specified criteria. The data is 
5 persisted within General American Corporation's EPN. 

[0132]The order module 64 includes a means for associating one or more 
documents with a selected entry 80. The means for associating one or more 
documents with a selected entry 80 includes an HTML user interface that requires 
documents to be associated to a specific context and the existence of a parent-to-child 

10 hierarchy between documents and that specific context implemented within a 
relational datastore. 

[01 33] The document entry module 10 fiirther includes a means for printing 
documents 82, means for downloading electronic copies of documents 84, means for 
deleting selected documents 86, means for displaying document histories 90, and 

15 means for changing document privileges 92. The means for printing documents 82 
includes HTML and JavaScript to enable a computer's print dialog box and the 
retrieval of content fi-om a relational datasource given a document identifier. The 
relational datasource is iLumin DHS/iCabinet and General American Corporation's 
EPN. 

20 [0134]The means for downloading electronic copies of documents 84 allows a 

user to invoke a mechanism on a remote server, the response to which is the content- 
associated user-supplied document identifier. A browser interprets the response fi-om 
the server and provides the option to save the file to a local file system. The content 
is retrieved firom a relational datasource fi-om a relational datasource such as iLumin' s 

25 DHS/iCabinet and General American Corporation's EPN. A servlet provided by 
iLumin DHS is utilized. 

[0135]The means for deleting selected documents 86 includes an HTML 
interface for selecting documents for deletion. The means for deleting selected 
documents 86 also includes a document identifier for removing the content and 

30 related reference firom a relational datasource such as iLumin 's DHS/iCabinet and 
General American Corporation's EPN. 
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[0136] The means for displaying document histories 90 includes an HTML 
user interface for selecting grouped previous versions of the document for which the 
history is to be displayed. The means for displaying document histories 90 also 
includes a document collection identifier for retrieving all related versions and history 
5 of the documents from a datasource. 

[0137]The means for changing document privileges 92 includes a mechanism 
for enabling an authorized user to assign a predefined access right to a document. The 
mechanism includes an HTML control for capturing a user's selection of documents 
using reference data contained in a database that allow the relationship of users to 

10 documents. The mechanism includes a document identifier for setting a change 
document access right property in a datastore. 

[0138]Figure 5 is a schematic diagram of a real-time digital certificate 
generator 14 for effecting electronic signatures. The certificate generator 14 includes 
means for entering data for a certificate recipient including an entrusted identification 

15 and authentication (I&A) 94, means for initiating the generation of a key pair 96, 

means for transmitting data to a certificate authority 100, and means for receiving the 
digital certificate from the certificate of authority 102. 

[0139]The means for entering data for a certificate recipient including an 
entrusted identification and authentication 94 includes an HTML user interface for 

20 capturing user identification and authentication information such as but not limited to 
a drivers' license number. The means for entering data for a certificate recipient 
including an entrusted identification and authentication 94 also includes Java business 
objects for verifying and storing the information related to identification and 
authentication in a datastore. 

25 [0140] The means for initiating the generation of a key pair 96 includes 

cryptography API's for generating a key pair and a datastore for storing the key pair. 
The means for transmitting data to a certificate authority 100 includes a Java business 
object for gathering user credential information stored in a datastore and passing such 
information to Verisign's public key infrastructure (PKI) component using a defined 

30 interface, although the same may be integrated with any managed PKI provider. The 
means for receiving the digital certificate from the certificate of authority 102 
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includes a Java business object for receiving the certificate from a VeriSign Managed 
PKI component, although the same may be integrated with any managed PKI 
provider. 

[0141]The certificate generator includes means for automatically associating 
5 the digital certificate with a certificate recipient system user identification (ID) 104 
and means for automatically removing the certificate 106 wherein the means for 
automatically removing the certificate removes the certificate from means for data 
entry 107. The means for automatically associating the digital certificate with a 
certificate recipient system user identification (ID) 104 includes a Java business 

10 object to register/associate a received certificate with an intended user in a datastore. 
The means for automatically removing the certificate 106 includes an HTML user 
interface using a VB script-based Crypto API for removing an associated user's 
certificate from a browser. 

[0142]The certificate generator also includes means for providing secondary 

15 verification 110, which may be a system user ID 111. The means for providing 
secondary verification 110 includes an HTML user interface for accepting the 
secondary verification, such as a password, and Java business objects for verifying the 
password in a datastore. An HTML user interface for managing passwords and Java 
business objects for managing passwords for a user in a datastore control the system 

20 user ID 111. 

[0143]The means for initiating the generation of a key pair 96 for the digital 
certificate further includes means for generating the initiation of a key pair for a 
browser-based digital certificate 176, a roaming digital certificate 180, and/or a 
hardware-based digital certificate 160. The means for initiating the generation of a 

25 key pair for a browser-based digital certificate 176 includes an HTML user interface 
employing a VB Script-based Microsoft Crypto API for generating a key pair in a 
default key store, although any supported cryptography API's may be used. 

[01 44] The means for generating the initiation of a key pair for a roaming 
digital certificate 180 includes an HTML user interface and a Script-based VeriSign 

30 API for generating a key pair in a VeriSign roaming keystore, although any vendor- 
specific API's that support roaming may be used. The means for generating the 
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initiation of a key pair for a hardware-based digital certificate 160 includes an HTML 
user interface and script-based API approved by a hardware vendor for generating a 
key pair in a keystore on the relevant hardware, although any hardware vendor- 
recommended API's may be used. 
5 I0145]The means for receiving the digital certificate from the certificate 

authority 102 includes means for automatically installing the certificate on a 
computer's browser 162. The means for automatically installing the certificate on a 
computer's browser 162 includes an HTML user interface and a VB script-based 
crypto API for installing a received certificate in a browser. Any supported 

10 cryptography API's may be used for installing the received certificate. 

[0146]The real time digital certificate generator 14 for effecting electronic 
signatures for an electronic document management system includes means for 
managing the life cycle of the certificate from within the document management 
system 166. The means for managing the life cycle of the certificate from within the 

15 document management system 166 includes an HTML-based front end for viewing, 
revoking, and renewing certificates and Java business objects or maintaining the state 
of certificates in a datastore. 

[0147]The means for managing the life cycle of the certificate from within the 
document management system 1 66 includes means for performing processes 

20 necessary to renew the digital certificate 170. The means for performing processes 
necessary to renew the digital certificate 170 includes an HTML user interface for 
capturing a user request to renew a certificate and a Java business object for 
forwarding the request to a VeriSign Managed PKI component and installing a new 
certificate, although any vendor-specific API's that support these ftmctions may be 

25 used. 

[0148]The means for managing the life cycle of the certificate from within the 
document management system 166 includes means for revoking the digital certificate 
172. The means for revoking the digital certificate 172 includes an HTML user 
interface for capturing a user request to revoke a certificate and a Java business object 
30 for forwarding the request to a VeriSign Managed PKI component for revoking the 
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certificate, although any vendor-specific API's that support these fiinctions may be 
used. 

[0149]The means for managing the life cycle of the certificate firom within the 
document management system 166 includes means for performing processes 
5 necessary for certificate recipient customer support 174. The means for performing 
processes necessary for certificate recipient customer support 1 74 includes an HTML 
user interface for allowing customer support personnel to review the status of a user's 
certificate and enable certificate management fiinctions to assist the user in requesting 
a certificate. The means for performing processes necessary for certificate recipient 

10 customer support 174 includes a back end integrated with certificate management 
fiinctionalities such as renewing and revoking a certificate. 

[0150]Figure 6 is a screen shot showing a user interface for the document 
entry module 10 for an electronic document management system constructed 
according to the present invention. The document entry module 10 includes a means 

15 for uploading documents 34 and a means for naming each document 35. The means 
for uploading documents 34 includes means for specifying documents to be uploaded 
130, means for uploading documents singly 132, and means for uploading document 
packages 134. The means for naming each document 35 fiirther includes a means for 
associating related entries of documents 36. The means for associating related entries 

20 of documents 36 includes means for associating related entries of documents in a 
hierarchal manner 40. 

[0151]Figure 7 is a screen shot showing a user interface for a means for 
specifying the structure of a document package 142 for an electronic document 
management system constructed according to the present invention. 

25 [0152]Figure 8 is a screen shot showing a user interface for a means for 

cataloguing and storing structures of document packages 144 and a means for parsing 
the contents of document packages into individual documents 146 for an electronic 
document management system constructed according to the present invention. 
[0153]Figure 9 is a screen shot showing a user interface for a document 

30 management module 12 for an electronic document management system constructed 
according to the present invention. 
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[01541Figure 10 is a screen shot showing a user interface for a real-time 
certificate generator 14 for an electronic document management system constructed 
according to the present invention. The real-time digital certificate generator 14 
includes means for entering data for certificate recipient including an entrusted 
5 identification and authentication 94. The real-time digital certificate generator 14 
includes means for providing secondary identification 110. 

[0155]Figure 1 1 is a screen shot showing a user interface for performing 
digital certificate processes for an electronic document management system 
constructed according to the present invention. The digital certificate processes are 
10 performed through means for automatically associating the digital certificate with the 
certificate recipient system user identification 104, means for automatically installing 
the certificate on a computer's browser 162, means for performing processes 
necessary to renew the digital certificate 170, and means for revoking the digital 
certificate 172. 

15 [0156]Figure 12 is a screen shot showing a user interface for a means for 

managing the life cycle of certificates 166 for an electronic document management 
system constructed according to the present invention. 

[0157]Figure 13 is a screen shot showing a user interface for a means for 
receiving digital certificates from a certificate authority 102 for an electronic 
20 document management system constructed according to the present invention. 

[01 58] Figure 14 is a screen shot showing a user interface for a means for 
removing a digital certificate 106 for an electronic document management system 
constructed according to the present invention. 

[0159]Figure 15 is a screen shot showing a user interface for a means for 
25 attaching an electronic signature to a document 50 for an electronic document 

management system constructed according to the present invention. The means for 
attaching an electronic signature to a document is a personal identification number 
signature. 

[0160]Figure 16 is a screen shot showing a user interface for a means for 
30 attaching a digital signature to a document 60 for an electronic document for a 
document management system constructed according to the present invention. 
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[0161]Figure 17 is a screen shot showing a user interface for a document 
repository module 16 for an electronic document management system constructed 
according to the present invention. 

[0162] Figure 18 is a screen shot showing a user interface for a means for 
5 accessing documents 1 8 for an electronic document management system constructed 
according to the present invention. 

[01 63] Figure 19 is a screen shot showing a user interface for a means for 
accessing documents 1 8 for an electronic document management system constructed 
according to the present invention. 
10 [01 64] Figure 20 is a screen shot showing a user interface for an order module 

64 for an electronic document management system constructed according to the 
present invention. 

[01 65] Figure 21 is a screen shot showing a user interface for an order module 
64 for an electronic document management system constructed according to the 
15 present invention. 

[01 66] Figure 22 is a screen shot showing a user interface for a filtering means 
72 for an electronic document management system constructed according to the 
present invention. The order module 63 of the electronic document management 
system includes a list of available service providers 66 and a means for selecting one 
20 or more services from the service providers 67. 

[0168]Figure 23 is a screen shot showing a user interface for a preferences 
filter 74 for an electronic document management system constructed according to the 
present invention. 

[0169]Figure 24 is a screen shot showing a user interface for a means for 
25 accessing documents 1 8 for an electronic document management system constructed 
according to the present invention. The means for accessing documents 18 includes 
means for printing documents 82, means for downloading electronic copies of 
documents 84, means for deleting selected documents 86, means for displaying 
document histories 90, and means for changing document privileges 92. 
30 [OlTOJFigure 25 is a screen shot showing a user interface for a means for 

filtering documents by user-defined criteria 20 for an electronic document 
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management system constructed according to the present invention. The means for 
filtering documents 20 includes pre-selected criteria 22 and means for grouping 
filtered documents 26. 

[0171]Figure 26 is a screen shot showing a user interface for a means for 
5 grouping documents 24 for an electronic document management system constructed 
according to the present invention. 

[0172]Figure 27 is a screen shot showing a user interface for a means for batch 
transfer of documents 32 for an electronic document management system constructed 
according to the present invention. 

10 [0173]Figure 28 is a screen shot showing a user interface for a means for 

setting document privileges 44 for an electronic document management system 
constructed according to the present invention. 

[0174]Figure 29 is a screen shot showing a user interface for a means for 
versioning documents 128 and means for displaying documents 46 for an electronic 

15 document management system constructed according to the present invention. 

[0175]Certain modifications and improvements will occur to those skilled in 
the art upon a reading of the foregoing description. By way of example, the electronic 
document management system can also be used in medical applications where a 
digital signature is required to effect such procedures as a lab test order. Additionally, 

20 while the described embodiment uses Model-View-Controller based architecture to tie 
HTML front end and J2EE back end, any architecture that will accommodate user 
interfaces including but not limited to Java Swing, Java Applet, and MOTIF can be 
used. Business logic can be implemented in any of several programming languages 
including but not limited to C, C-H-, and Visual Basic. Data sources that can utilized 

25 include but are not limited to relational databases, object databases, and file-based 

databases. The architecture should be capable of being integrated cryptography APFs 
dealing with X.509 certificates. Also, although in the preferred embodiment of the 
system, it is used to manage extemally generated documents, the system is capable of 
managing internally generated documents. Finally, while the preferred embodiment is 

30 a real-time digital certificate generator for effecting electronic signatures, the present 
invention may be utilized for various types of digital identities and is not limited just 
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to digital certificates. All such modifications and improvements have been deleted 
herein for the sake of conciseness and readability but are properly within the scope of 
the following claims. 
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